Skip to content

Commit 379a436

Browse files
author
AWS
committed
AWS Identity and Access Management Update: Updated OIDC and SAML apis to reject multiple simultaneous requests to change a unique object.
1 parent c6ed566 commit 379a436

File tree

4 files changed

+73
-63
lines changed

4 files changed

+73
-63
lines changed

‎.changes/next-release/feature-AWSIdentityandAccessManagement-98578c8.json‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
{
2+
"type": "feature",
3+
"category": "AWS Identity and Access Management",
4+
"contributor": "",
5+
"description": "Updated OIDC and SAML apis to reject multiple simultaneous requests to change a unique object."
6+
}

‎services/iam/src/main/resources/codegen-resources/endpoint-rule-set.json‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,26 +6,26 @@
66
"required": true,
77
"default": false,
88
"documentation": "When true, use the dual-stack endpoint. If the configured endpoint does not support dual-stack, dispatching the request MAY return an error.",
9-
"type": "Boolean"
9+
"type": "boolean"
1010
},
1111
"UseFIPS": {
1212
"builtIn": "AWS::UseFIPS",
1313
"required": true,
1414
"default": false,
1515
"documentation": "When true, send this request to the FIPS-compliant regional endpoint. If the configured endpoint does not have a FIPS compliant endpoint, dispatching the request will return an error.",
16-
"type": "Boolean"
16+
"type": "boolean"
1717
},
1818
"Endpoint": {
1919
"builtIn": "SDK::Endpoint",
2020
"required": false,
2121
"documentation": "Override the endpoint used to send this request",
22-
"type": "String"
22+
"type": "string"
2323
},
2424
"Region": {
2525
"builtIn": "AWS::Region",
2626
"required": false,
2727
"documentation": "The AWS region used to dispatch the request.",
28-
"type": "String"
28+
"type": "string"
2929
}
3030
},
3131
"rules": [

‎services/iam/src/main/resources/codegen-resources/endpoint-tests.json‎

Lines changed: 58 additions & 58 deletions
Original file line numberDiff line numberDiff line change
@@ -202,85 +202,43 @@
202202
}
203203
},
204204
{
205-
"documentation": "For region us-gov-west-1 with FIPS enabled and DualStack enabled",
206-
"expect": {
207-
"endpoint": {
208-
"properties": {
209-
"authSchemes": [
210-
{
211-
"name": "sigv4",
212-
"signingRegion": "us-gov-west-1"
213-
}
214-
]
215-
},
216-
"url": "https://iam.us-gov.api.aws"
217-
}
218-
},
219-
"params": {
220-
"Region": "us-gov-west-1",
221-
"UseFIPS": true,
222-
"UseDualStack": true
223-
}
224-
},
225-
{
226-
"documentation": "For region us-gov-west-1 with FIPS enabled and DualStack disabled",
205+
"documentation": "For region eusc-de-east-1 with FIPS enabled and DualStack disabled",
227206
"expect": {
228207
"endpoint": {
229208
"properties": {
230209
"authSchemes": [
231210
{
232211
"name": "sigv4",
233-
"signingRegion": "us-gov-west-1"
212+
"signingRegion": "eusc-de-east-1"
234213
}
235214
]
236215
},
237-
"url": "https://iam.us-gov.amazonaws.com"
216+
"url": "https://iam-fips.amazonaws.eu"
238217
}
239218
},
240219
"params": {
241-
"Region": "us-gov-west-1",
220+
"Region": "eusc-de-east-1",
242221
"UseFIPS": true,
243222
"UseDualStack": false
244223
}
245224
},
246225
{
247-
"documentation": "For region us-gov-west-1 with FIPS disabled and DualStack enabled",
248-
"expect": {
249-
"endpoint": {
250-
"properties": {
251-
"authSchemes": [
252-
{
253-
"name": "sigv4",
254-
"signingRegion": "us-gov-west-1"
255-
}
256-
]
257-
},
258-
"url": "https://iam.us-gov.api.aws"
259-
}
260-
},
261-
"params": {
262-
"Region": "us-gov-west-1",
263-
"UseFIPS": false,
264-
"UseDualStack": true
265-
}
266-
},
267-
{
268-
"documentation": "For region us-gov-west-1 with FIPS disabled and DualStack disabled",
226+
"documentation": "For region eusc-de-east-1 with FIPS disabled and DualStack disabled",
269227
"expect": {
270228
"endpoint": {
271229
"properties": {
272230
"authSchemes": [
273231
{
274232
"name": "sigv4",
275-
"signingRegion": "us-gov-west-1"
233+
"signingRegion": "eusc-de-east-1"
276234
}
277235
]
278236
},
279-
"url": "https://iam.us-gov.amazonaws.com"
237+
"url": "https://iam.eusc-de-east-1.amazonaws.eu"
280238
}
281239
},
282240
"params": {
283-
"Region": "us-gov-west-1",
241+
"Region": "eusc-de-east-1",
284242
"UseFIPS": false,
285243
"UseDualStack": false
286244
}
@@ -454,43 +412,85 @@
454412
}
455413
},
456414
{
457-
"documentation": "For region eusc-de-east-1 with FIPS enabled and DualStack disabled",
415+
"documentation": "For region us-gov-west-1 with FIPS enabled and DualStack enabled",
458416
"expect": {
459417
"endpoint": {
460418
"properties": {
461419
"authSchemes": [
462420
{
463421
"name": "sigv4",
464-
"signingRegion": "eusc-de-east-1"
422+
"signingRegion": "us-gov-west-1"
465423
}
466424
]
467425
},
468-
"url": "https://iam-fips.amazonaws.eu"
426+
"url": "https://iam.us-gov.api.aws"
469427
}
470428
},
471429
"params": {
472-
"Region": "eusc-de-east-1",
430+
"Region": "us-gov-west-1",
431+
"UseFIPS": true,
432+
"UseDualStack": true
433+
}
434+
},
435+
{
436+
"documentation": "For region us-gov-west-1 with FIPS enabled and DualStack disabled",
437+
"expect": {
438+
"endpoint": {
439+
"properties": {
440+
"authSchemes": [
441+
{
442+
"name": "sigv4",
443+
"signingRegion": "us-gov-west-1"
444+
}
445+
]
446+
},
447+
"url": "https://iam.us-gov.amazonaws.com"
448+
}
449+
},
450+
"params": {
451+
"Region": "us-gov-west-1",
473452
"UseFIPS": true,
474453
"UseDualStack": false
475454
}
476455
},
477456
{
478-
"documentation": "For region eusc-de-east-1 with FIPS disabled and DualStack disabled",
457+
"documentation": "For region us-gov-west-1 with FIPS disabled and DualStack enabled",
479458
"expect": {
480459
"endpoint": {
481460
"properties": {
482461
"authSchemes": [
483462
{
484463
"name": "sigv4",
485-
"signingRegion": "eusc-de-east-1"
464+
"signingRegion": "us-gov-west-1"
486465
}
487466
]
488467
},
489-
"url": "https://iam.eusc-de-east-1.amazonaws.eu"
468+
"url": "https://iam.us-gov.api.aws"
490469
}
491470
},
492471
"params": {
493-
"Region": "eusc-de-east-1",
472+
"Region": "us-gov-west-1",
473+
"UseFIPS": false,
474+
"UseDualStack": true
475+
}
476+
},
477+
{
478+
"documentation": "For region us-gov-west-1 with FIPS disabled and DualStack disabled",
479+
"expect": {
480+
"endpoint": {
481+
"properties": {
482+
"authSchemes": [
483+
{
484+
"name": "sigv4",
485+
"signingRegion": "us-gov-west-1"
486+
}
487+
]
488+
},
489+
"url": "https://iam.us-gov.amazonaws.com"
490+
}
491+
},
492+
"params": {
493+
"Region": "us-gov-west-1",
494494
"UseFIPS": false,
495495
"UseDualStack": false
496496
}

‎services/iam/src/main/resources/codegen-resources/service-2.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,7 @@
2323
},
2424
"input":{"shape":"AddClientIDToOpenIDConnectProviderRequest"},
2525
"errors":[
26+
{"shape":"ConcurrentModificationException"},
2627
{"shape":"InvalidInputException"},
2728
{"shape":"NoSuchEntityException"},
2829
{"shape":"LimitExceededException"},
@@ -2060,6 +2061,7 @@
20602061
},
20612062
"input":{"shape":"RemoveClientIDFromOpenIDConnectProviderRequest"},
20622063
"errors":[
2064+
{"shape":"ConcurrentModificationException"},
20632065
{"shape":"InvalidInputException"},
20642066
{"shape":"NoSuchEntityException"},
20652067
{"shape":"ServiceFailureException"}
@@ -2520,6 +2522,7 @@
25202522
},
25212523
"input":{"shape":"UpdateOpenIDConnectProviderThumbprintRequest"},
25222524
"errors":[
2525+
{"shape":"ConcurrentModificationException"},
25232526
{"shape":"InvalidInputException"},
25242527
{"shape":"NoSuchEntityException"},
25252528
{"shape":"ServiceFailureException"}
@@ -2577,7 +2580,8 @@
25772580
{"shape":"NoSuchEntityException"},
25782581
{"shape":"InvalidInputException"},
25792582
{"shape":"LimitExceededException"},
2580-
{"shape":"ServiceFailureException"}
2583+
{"shape":"ServiceFailureException"},
2584+
{"shape":"ConcurrentModificationException"}
25812585
],
25822586
"documentation":"<p>Updates the metadata document, SAML encryption settings, and private keys for an existing SAML provider. To rotate private keys, add your new private key and then remove the old key in a separate request.</p>"
25832587
},

0 commit comments

Comments
 (0)